ADAMAS: Interweaving unicode and color to enhance CAPTCHA security

We propose, implement and test a new CAPTCHA, called Adamas, which offers resistance against pre-processing and various forms of segmentation and recognition attacks. The multi-layered security approach employed in this CAPTCHA mainly comes from its use of Unicode as an input space, a virtual keyboard as the input device, homoglyphs and correlated usage of color in foreground and background as well as several layers of randomization that aim to minimize the formation of detectable patterns that can be exploited by machines. A user study conducted to measure the usability of Adamas indicates that its solving accuracy is comparable to major CAPTCHAs in use today and offers insights into factors that affect CAPTCHA usability.     

基于Ajax和图形验证码的身份认证实现

为了保证Web系统的安全,传统的模式一般采用用户名和密码来进行身份认证,这种模式以同步方式运行,以文本格式存储,效率低,安全性差,Ajax技术的异步能力、图形验证码的点阵存储、权限访问控制三者相结合,高效实现了Web系统身份认证功能,安全性能大有改善。     

利用旋转归一化和粗匹配算法破解验证码

验证码是一种能够区分计算机程序和人类的图灵测试．提出了一种使用粗匹配序贯相似性检测算法来破解字符有旋转、非扭曲、无粘连的验证码的方法．通过对旋转字符的旋转角度归一化减少了模板的数量,使用粗匹配算法降低了单个模板匹配所用的时间,从而在速度和准确率方面有了很大提高．以网上的验证码为例,介绍了破解的4个阶段: 图像的预处理、提取字符、旋转字符和识别字符．实验结果表明,使用基于粗匹配的序贯相似性检测匹配算法,验证码破解成功率可以达到85％,平均破解一张验证码图片所需的时间为3.5s,远优于同类算法．     

基于 OCR 技术的图像验证码识别

验证码是一种标准的网络安全技术,它主要用来防止网民或者黑客等对网站的恶意注册和访问,以及发送垃圾文件、暴力破解高价值密码、滥发广告等恶意事件。通过对图片的扫描,可以提取图片中的数字、字符信息等。本文提出了一种基于OCR技术的图形验证码识别技术。通过对验证码图片进行灰度化、二值化、去噪点、圈点填充、直线填充、图像分割、统一大小、图像匹配和存入字库等一系列的操作,进行对验证码的识别实验。本文通过实验对验证码的特点有了充分的了解,这样方便设计出更加安全的验证码,防止被不法分子破解。     

基于共振峰合成和韵律调整的语音验证码方法研究*

为了提高语音验证技术的有效性,提出了一种基于共振峰合成、修改时长和调节韵律的随机语音验证码生成方法。该方法选择音素作为语音合成单元,基于规则在合成过程中设定随机语速参数,以及调整单元之间的连接规则来实现韵律的随机调整,使得语速和韵律具有不确定性和不可预测性,从而有效降低了自动语音识别技术（ASR）对语音码的识别率,增强了语音验证码的抗攻击性。合成的语音验证码的人耳识别率达到了90%左右,ASR的识别率为28.8%,主观平均判分（MOS）为4分,语音码的可懂度和清晰度达到了满意的效果。实验结果验证了所提方法的可行性。     

Synthetic handwritten CAPTCHAs

CAPTCHAs (completely automated public Turing test to tell computers and humans apart) are in common use today as a method for performing automated human verification online. The most popular type of CAPTCHA is the text recognition variety. However, many of the existing printed text CAPTCHAs have been broken by web-bots and are hence vulnerable to attack. We present an approach to use human-like handwriting for designing CAPTCHAs. A synthetic handwriting generation method is presented, where the generated textlines need to be as close as possible to human handwriting without being writer-specific. Such handwritten CAPTCHAs exploit the differential in handwriting reading proficiency between humans and machines. Test results show that when the generated textlines are further obfuscated with a set of deformations, machine recognition rates decrease considerably, compared to prior work, while human recognition rates remain the same.     

A novel user-participating authentication scheme

When utilizing services over public networks, a remote user authentication mechanism forms a first line of defense by rejecting illegal logins from unauthorized users. On-line applications over the Internet such as E-learning, on-line games, etc. are ever more common; remote user participation via networks plays a vital role in security and should be guaranteed. Without this countermeasure, malicious users are likely to enable agents to communicate with remote on-line systems. While existing remote user authentication schemes rarely address this issue, this paper highlights the problem of guaranteeing remote user participation. This proposed user authentication scheme benefits from combining CAPTCHA techniques and visual secret sharing to ensure deliberate human interaction. This scheme provides mutual authentication and is secure against certain known attacks, as well as low in computation cost.     

CAPTCHA技术研究综述

全自动开放式人机区分图灵测试(completely automated public Turing test to tell computers and humans apart,CAPTCHA)又称为人机交互验证(human interactive proof,HIP),它能自动产生并评估一个测试,这个测试能被几乎所有人类用户通过,而现有的计算机程序不能通过.CAPTCHA提供了一种自动驱分人和机器的手段,已成为一种标准的网络安全技术成功应用于包括Google,Yahoo!以及微软在内的各大网站.CAPTCHA设计基于人工智能领域的开放性问题,按表现载体和内容不同分为文本、图像、声音3种类型,其中,基于字符识别的文本CAPTCHA已得到广泛使用;图像CAPTCHA利用计算机视觉中的难解问题,目前尚处于研究阶段;声音CAPTCHA针对视觉残障者,是对前两种视觉CAPTCHA的补充.介绍了CAPTCHA的发展和设计准则,详细阐述CAPTCHA设计和破解的研究工作及最新进展,给出典型实例,讨论其可用性和安全性,最后指出未来CAPTCHA技术的发展方向和亟待解决的问题.     

基于粗糙集的一类彩色验证码识别研究

文章根据一类图片验证码的字符颜色、大小、字符间位置关系,使用粗糙集的方法将验证码图片中的字符分割出来,再使用AdaBoost算法进行训练,将分割得到的字符识别出来。经实验证明,该算法对该类彩色验证码,无需很高的训练样本,即具有很高的识别率和速率,基本可以满足实时应用、、     

基于Ajax技术的图形验证码设计

阐述了应用Ajax技术设计图形验证码的必要性,介绍Ajax的核心技术对象及工作原理,提出了一种基于Ajax技术设计图形验证码的方案和实现方法。